Lucene search
+L

271 matches found

The Hacker News
The Hacker News
added 2018/06/28 6:47 a.m.89 views

Google Home and Chromecast DOWN? Reboot them to Fix the Glitch

If your Google Home, Home Mini and/or Google Chromecast streaming stick were not working properly, you are not alone. Google Home, Home Mini, and Chromecast were down globally for many users for several hours, leaving a lot of people with trouble watching TV, controlling smart home gadgets, and...

6.7AI score
SaveExploits0
CNVD
CNVD
added 2018/06/27 12:0 a.m.4 views

Google Home and Chromecast Design Vulnerabilities

Google Home and Chromecast are both products of Google Inc. Google Home is a smart speaker device and Chromecast is an Internet TV set-top box device. There is a security vulnerability in the API services in Google Home and Chromecast. A remote attacker could use this vulnerability to determine t...

4.3CVSS4.6AI score0.00696EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2018/06/25 2:29 a.m.4 views

CVE-2018-12716

The API service on Google Home and Chromecast devices before mid-July 2018 does not prevent DNS rebinding attacks from reading the scanresults JSON data, which allows remote attackers to determine the physical location of most web browsers by leveraging the presence of one of these devices on its...

4.3CVSS5.1AI score0.00696EPSS
SaveExploits0References9
NVD
NVD
added 2018/06/25 2:29 a.m.21 views

CVE-2018-12716

The API service on Google Home and Chromecast devices before mid-July 2018 does not prevent DNS rebinding attacks from reading the scanresults JSON data, which allows remote attackers to determine the physical location of most web browsers by leveraging the presence of one of these devices on its...

4.3CVSS4.6AI score0.00696EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2018/06/25 2:0 a.m.26 views

CVE-2018-12716

The API service on Google Home and Chromecast devices before mid-July 2018 does not prevent DNS rebinding attacks from reading the scanresults JSON data, which allows remote attackers to determine the physical location of most web browsers by leveraging the presence of one of these devices on its...

4.6AI score0.00696EPSS
SaveExploits0References4
CVE
CVE
added 2018/06/25 2:0 a.m.62 views

CVE-2018-12716

The CVE-2018-12716 entry describes an API service vulnerability in Google Home and Chromecast devices prior to mid-July 2018. The issue allows DNS rebinding to read scan_results JSON data and extract BSSID fields, enabling remote readers on the local network to determine the user’s physical locat...

4.3CVSS4.6AI score0.00696EPSS
SaveExploits0References4Affected Software1
HackRead
HackRead
added 2018/06/19 10:53 p.m.31 views

Flaw in Google Home and Chromecast devices reveals user location

By Waqas Craig Young, an IT security expert from Tripwire has found This is a post from HackRead.com Read the original post: Flaw in Google Home and Chromecast devices reveals user location...

6.9AI score
SaveExploits0
Krebs on Security
Krebs on Security
added 2018/06/18 2:4 p.m.43 views

Google to Fix Location Data Leak in Google Home, Chromecast

Google in the coming weeks is expected to fix a location privacy leak in two of its most popular consumer products. New research shows that Web sites can run a simple script in the background that collects precise location data on people who have a Google Home or Chromecast device installed...

6.8AI score
SaveExploits0
Google Chrome Security Advisories
Google Chrome Security Advisories
added 2017/12/06 12:0 a.m.48 views

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 63 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 63.0.3239.84 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

8.8CVSS9AI score0.02963EPSS
SaveExploits1Affected Software1
UbuntuCve
UbuntuCve
added 2017/11/07 4:29 p.m.27 views

CVE-2017-2909

An infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8 library. A specially crafted DNS request can cause an infinite loop resulting in high CPU usage and Denial Of Service. An attacker can send a packet over the network to trigger this vulnerability...

7.8CVSS7.1AI score0.01428EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2017/07/24 12:0 a.m.10 views

Google Chromecast Detection (UDP)

Binary data 700159.prm...

7.3AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2017/07/24 12:0 a.m.11 views

Google Chromecast Detection (TCP)

Binary data 700164.prm...

7.3AI score
SaveExploits0References1
Metasploit
Metasploit
added 2016/12/23 10:10 p.m.30 views

Chromecast Wifi Enumeration

This module enumerates wireless access points through Chromecast. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Chromecast Wifi Enumeration', 'Description' = %q This module enumerates wireles...

7.1AI score
SaveExploits0
The Hacker News
The Hacker News
added 2016/09/26 9:28 p.m.24 views

Google to Launch 'Andromeda OS' — An Android-Chrome OS Hybrid

Google's long-rumored Android-Chrome hybrid operating system is expected to debut at the company's upcoming hardware event on October 4. The company has been working to merge the two OSes for roughly 3 years with a release planned for 2017, but an "early version" to show things off to the world i...

6.7AI score
SaveExploits0
hackapp
hackapp
added 2016/04/01 10:13 a.m.13 views

Stadt Land Fluss (Chromecast) - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Stadt Land Fluss Chromecast published at the 'play' market has multiple vulnerabilities...

1AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:37 a.m.43 views

BubbleUPnP for DLNA/Chromecast - BSD license, Base64 encoded String, Customized SSL vulnerabilities

HackApp vulnerability scanner discovered that application BubbleUPnP for DLNA/Chromecast published at the 'play' market has multiple vulnerabilities...

0.2AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:16 a.m.20 views

Best apps for Chromecast - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Best apps for Chromecast published at the 'play' market has multiple vulnerabilities...

0.6AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:11 a.m.22 views

VEGA Cast (for Chromecast) - Customized SSL, Dynamic Code Loading, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application VEGA Cast for Chromecast published at the 'play' market has multiple vulnerabilities...

0.4AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:11 a.m.16 views

BrowserCast Video (Chromecast) - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application BrowserCast Video Chromecast published at the 'play' market has multiple vulnerabilities...

1.1AI score
SaveExploits0References1Affected Software1
hackapp
hackapp
added 2016/04/01 9:11 a.m.42 views

CastBox - Cast to Chromecast - Base64 encoded String, Customized SSL, Dangerous filesystem permissions vulnerabilities

HackApp vulnerability scanner discovered that application CastBox - Cast to Chromecast published at the 'play' market has multiple vulnerabilities...

0.4AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder